Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
File: X0qPBO8v6-VPnbapovhWWUtuLwg.mft (raw, json)
Hash identifier: vUnaI7UYzWP2M2yiym0oU+GI0Km8MDaqEpu9yzlH1+U=
Subject key identifier: 80:19:AC:D9:59:D8:F3:A5:78:AC:CA:5B:02:9E:3D:04:77:CD:AA:52
Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Certificate serial: 01A002F0406ED4867CD127F20A9C9FCE33AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
Manifest number: 15A1
Signing time: Sat 15 Aug 2026 01:01:34 +0000
Manifest this update: Sat 15 Aug 2026 01:01:34 +0000
Manifest next update: Sun 16 Aug 2026 01:01:34 +0000
Files and hashes: 1: 2Pl1WOLsPcEe3IssGI6GqTdAUd8.roa (hash: xEvziGYE9gFL6LzKGBIz1s8KI0YFj5pJymQRSZymNEM=)
2: X0qPBO8v6-VPnbapovhWWUtuLwg.crl (hash: eN9WKoW0EggWPMDTF14JaW7BWrRxyEnrn+O/4jZnFTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 01:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:f0:40:6e:d4:86:7c:d1:27:f2:0a:9c:9f:ce:33:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Validity
Not Before: Aug 15 01:01:34 2026 GMT
Not After : Aug 16 01:01:34 2026 GMT
Subject: CN=8019acd959d8f3a578acca5b029e3d0477cdaa52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:46:f0:a4:3c:e5:e3:06:3b:9c:8d:00:e2:08:
6b:d2:29:11:d8:b9:0c:10:5e:ed:36:15:4e:9a:b3:
e3:31:c4:96:72:09:a9:f1:30:2d:64:24:38:e5:28:
ba:f8:19:ec:aa:41:a9:a8:a8:c9:a4:52:ca:15:c6:
43:f6:0e:34:97:6d:1c:ef:ba:ba:cd:b9:35:cf:53:
45:14:76:c0:ad:f0:bc:81:49:51:4d:7e:41:ca:1c:
9d:86:a5:7f:aa:d0:ef:58:51:ee:2f:79:78:d8:16:
48:ef:4f:9e:58:3d:f3:ba:05:97:32:f1:79:27:58:
e7:c0:d2:83:6c:32:e1:60:4a:6c:b9:ba:07:e6:bf:
d6:08:83:6a:10:cf:7a:db:25:bc:b0:d0:91:4c:72:
e0:98:d1:7d:ee:81:28:fa:6b:f3:e7:b9:21:57:13:
3f:93:38:38:0b:d0:4c:cd:c1:bc:81:6f:bb:bc:01:
01:0a:86:10:fd:91:13:53:81:6d:0d:fa:8c:8b:4b:
b5:a7:c6:64:bf:72:e6:34:a0:63:c2:29:3a:44:c3:
57:25:5b:c0:c9:52:b0:d1:dc:63:5f:d7:0b:33:5c:
71:99:69:fc:76:8b:4a:78:40:60:0e:65:86:e5:73:
4a:ea:7e:ce:5c:ee:30:2a:5c:a9:78:f5:36:e4:03:
a2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:19:AC:D9:59:D8:F3:A5:78:AC:CA:5B:02:9E:3D:04:77:CD:AA:52
X509v3 Authority Key Identifier:
keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:dc:b1:4a:07:6d:c5:0e:2b:17:ba:be:c9:ed:e8:95:2c:f3:
14:cd:87:a2:a3:99:da:3e:16:c9:88:80:3e:1e:30:29:cb:bf:
31:1c:78:c8:67:95:d7:75:2a:da:41:28:5c:74:1a:d6:94:6b:
31:74:fc:5b:b1:e0:e3:4c:62:25:46:80:99:55:c2:09:6f:83:
1d:1e:e6:06:8d:c8:57:e6:be:c8:9b:12:8b:7c:a3:bf:02:21:
83:dc:26:8d:59:17:e5:ff:e2:8b:ac:43:d1:31:a2:7a:c7:78:
03:a0:fd:c8:42:de:72:79:5a:b8:76:b0:91:48:26:f2:e8:ba:
be:d8:cc:88:c9:df:a9:2d:e8:48:c7:e7:4f:2f:c5:59:33:92:
65:04:80:ff:70:73:5f:be:a5:27:2c:b5:45:e4:0b:85:de:fd:
db:f8:92:9c:4d:7a:e1:44:ff:aa:99:a3:fe:85:fa:01:56:16:
ed:bf:36:8c:f3:99:83:6b:f2:d5:9b:75:a0:30:6e:21:1f:37:
22:4f:53:d8:b6:14:9b:ad:73:ab:fc:15:46:d9:13:7f:27:ed:
9b:13:5c:4a:78:20:f3:e6:ef:de:8b:bf:fc:54:50:89:35:7a:
79:b5:c5:86:98:b3:13:ab:f4:4b:17:4b:8d:a7:a6:66:76:3d:
6d:02:2a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:34:13 2026 by rpki-client